IBM Informix Dynamic Server JDBC Long Password Remote Denial Of Service Vulnerability

Bugtraq ID:	36538
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 04 2009 12:00AM
Updated:	Sep 29 2009 03:50PM
Credit:	The vendor disclosed this issue.
Vulnerable:	IBM Informix IDS 11.50 IBM Informix IDS 11.10 IBM Informix IDS 10.0
Not Vulnerable:	IBM Informix IDS 11.50.xC5 IBM Informix IDS 11.10.xC4 IBM Informix IDS 10.00.xC11

IBM Informix Dynamic Server JDBC Long Password Remote Denial Of Service Vulnerability

IBM Informix Dynamic Server (IDS) is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to trigger denial-of-service conditions.

The issue affects versions prior to IDS 10.00.xC11, 11.10.xC4, and 11.50.xC5.

IBM Informix Dynamic Server JDBC Long Password Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Informix Dynamic Server JDBC Long Password Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

IBM Informix Dynamic Server JDBC Long Password Remote Denial Of Service Vulnerability

References:

• Informix Dynamic Server (IDS) Homepage (IBM)
  
• IC61195: LONG PASSWORD CAUSES ASSERTION FAILURE OR CRASH (IBM)